logicalscope

4,373 reputation

2526

bio	website	cgi.com/securitylab
	location	Vancouver, Canada
	age	35
visits	member for	1 year, 5 months
	seen	yesterday
stats	profile views	152

Common Criteria professional working for CGI Canada's Security Evaluation and Testing Lab within the Canadian CC Scheme. If you want more information about what CC or FIPS can do for your product and business, feel free to drop me a line.

	4,373 reputation	bio	website	cgi.com/securitylab	visits	member for	1 year, 5 months
2526 badges		location	Vancouver, Canada		seen	yesterday

summary answers questions tags badges favorites bounties reputation activity

66 Revisions

suggestions reviews revisions comments badges posts accepts all

Jul 18	revised	Citation Needed for FIPS Anecdote Regarding MD5 and RC4 Added information re: RC4
Jul 18	revised	Citation Needed for FIPS Anecdote Regarding MD5 and RC4 Adding extra info to discuss differences b/w SSLv3 and TLS use of MD5 from IG.
Jun 30	revised	What drives FIPS140-2 compliance? added 8 characters in body
Jun 30	revised	What drives FIPS140-2 compliance? edited tags
Jun 29	revised	What can an attacker do with a stolen SSL private key? What should the web admin do? edited title
Jun 29	revised	Are there any FIPS140-2 requirements that apply when boot code is updated in the field? edited tags
Jun 29	revised	Evaluating hosting providers for CC development environment added 87 characters in body
Jun 28	revised	Inner Workings of Public Key Encryption deleted 18 characters in body
Jun 28	revised	Inner Workings of Public Key Encryption Added clarification to sessions and expirations.
Jun 28	revised	Inner Workings of Public Key Encryption Added additional information pertaining to the video as well as importance of DH for exchanging secrets.
Jun 20	revised	How can end-users detect malicious attempts at SSL spoofing when the network already has an authorized SSL proxy? The actual question, I feel (buried under a rant).
Jun 18	revised	What value security wise, if any, does a digital handwritten signature have? To differentiate b/w actual digital signature algorithms and handwritten sigs.
May 9	revised	If someone bought the .local TLD could that be a security risk? Adding addendum explaining similarity metrics.
Apr 21	revised	Convert RSA public key to the right format Pulling in potential answer from stack overflow for ease of reference.
Apr 20	revised	Hidden Registry Strings - possible rootkit? Misspelling in title
Apr 20	revised	Password sent via email upon registration Editing some language.
Apr 18	revised	how can you view an HTTP request in transit? Addressing the actual question.; added 41 characters in body
Apr 18	revised	Could Nmap scan switches/routers Grammar/spelling, ease of readability. Adding tag.
Apr 13	revised	Dangers of opening up a wide range of ports? (mosh) Brought back from being deleted; it is somewhat useful as it discusses the role of the OS in the network stack.
Apr 12	revised	Is there a crypto system which detects decryption somewhere between sender and receiver? added 9 characters in body